InfoSecBulletin Cybersecurity for mankind
The White Snake malware has been updated to take advantage of a new feature in the latest Google Chrome version. This update lets malware steal CVC codes from credit cards saved in browsers, posing a serious online security threat, according to reports on X.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
Chrome’s New Feature Draws Attention:
Google Chrome version 129, released on September 17, 2024, added new features for a better user experience.
One such feature is the ability to store CVC codes from credit cards directly within the browser for easier online transactions.
This feature was meant to simplify payments but has unintentionally drawn the attention of cybercriminals and infostealer developers.
White Snake Malware Update:
White Snake has swiftly adapted to this new opportunity. Malware developers have improved their tools to target and extract stored CVC codes from victims’ browsers. This upgrade enables White Snake to collect full credit card information, facilitating fraud and theft for cybercriminals.
White Snake’s use of the new Chrome feature highlights the ongoing struggle between software developers and cybercriminals. Users should be careful when storing sensitive information in browsers and consider using password managers or secure payment platforms instead.
Cybersecurity experts advise users to keep their security software updated and stay alert for any suspicious account activity. Google will fix this vulnerability in future updates, but users should take steps now to protect their financial information.
